Server Side Request Forgery in vRealize Operations... · CVE-2021-21975 · GitHub Advisory Database · GitHub

Server Side Request Forgery in vRealize Operations...

High severity Unreviewed Published May 24, 2022 to the GitHub Advisory Database • Updated Jan 29, 2023

Package

No package listed— Suggest a package

Affected versions

Unknown

Patched versions

Unknown

Description

Server Side Request Forgery in vRealize Operations Manager API (CVE-2021-21975) prior to 8.4 may allow a malicious actor with network access to the vRealize Operations Manager API can perform a Server Side Request Forgery attack to steal administrative credentials.

References

Published by the National Vulnerability Database

Mar 31, 2021

Published to the GitHub Advisory Database May 24, 2022

Last updated Jan 29, 2023